Ibm · Ibm Robotic Process Automation · CVE-2022-46773
**Name of the Vulnerable Software and Affected Versions**
IBM Robotic Process Automation versions 21.0.0 through 21.0.7
IBM Robotic Process Automation version 23.0.0
**Description**
The issue concerns a client-side validation bypass for credential pools, which may result in the creation of invalid credential pools.
**Recommendations**
For IBM Robotic Process Automation versions 21.0.0 through 21.0.7, update to a version that includes a fix for the client-side validation bypass issue.
For IBM Robotic Process Automation version 23.0.0, update to a version that includes a fix for the client-side validation bypass issue.
As a temporary workaround, consider restricting access to credential pool management functions until a patch is available.